CSIDS Exam Cram 2 (Exam 642-531)

[ LiB ]  

  1. You can access the command-line interface (CLI) by using the console port, Telnet and SSH to the command and control interface, or a direct monitor and keyboard ports on most models. However, the IDS-4215 does not have monitor and keyboard ports.

  2. The IDS 4.0 supports SSH versions 1 and 2 protocols.

  3. CLI locations:

    Syntax

    Location

    Sensor#

    Privilege exec

    Sensor(config)#

    Global configuration

    Sensor(config-if)#

    Command and control interface

    Sensor(config-ifs)#

    Sensing interface

    Sensor(config-ifg)#

    Interface group

    Sensor(config-Host-net)#

    NetworkParams configuration

  4. The NetworkParams configures several sensor networking settings, such as IP address, default gateway, hostname, and access list.

  5. The interface command-control mode enables you to configure an IP address for the sensor.

  6. The NetworkAccess service allows the configuration of managed devices; it has the prompt sensor(config-NetworkAccess)# .

  7. Configuring a managed device:

    • Set the VTY line password (Telnet).

    • Set the enable password. (Make it the same as the VTY line.)

    • Enable Telnet on the device.

    • Add the sensor to the trusted host list on the device.

  8. WebServer Service that allows the configuration of the HTTP/HTTPS cidwebServer application. The command prompt is sensor(config-WebServer)# .

  9. Virtual-sensor-configuration Level that allows you to fine-tune signature settings or even create custom signatures. The command prompt is sensor(config-vsc)# .

    • All signature tuning and custom signatures created are linked to this virtualSensor group.

    • To reset String.TCP settings back to default, use sensor(config-vsc)# reset-signature STRING.TCP all at the virtual-sensor-configuration level.

[ LiB ]  
Related

Категории